Overview

overview

10

Static

static

1

Tanks-scape (1).exe

windows7-x64

10

Tanks-scape (1).exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    Tanks-scape (1).exe

  • Size

    64.0MB

  • Sample

    230418-rqhd9sbh99

  • MD5

    e28b7ed7f5843a7bde8a9372263d8351

  • SHA1

    83c402b1740a5379b8378eb38f4c631325e89223

  • SHA256

    58bd1e64a9dbe1b67dd686c7303408c3ba5e61423d40d9e58d315428e7b017e1

  • SHA512

    5afdfd9bb2cb6345240a49f95ee95584cc224c338f8d34232ae96e357a29cb2d2b6448d748e5358aa4a332902a813200b1bb8f840ac4af86ee44e87dd481f7eb

  • SSDEEP

    1572864:VjddrbWEKIXkqEPeDFpdS5FTYmNRbQ3bcYNutHxY2eI32Hkf:NfW9iKPkFrUF7Kype6f

Score
10/10
lummaspywarestealer

Malware Config

Targets

    • Target

      Tanks-scape (1).exe

    • Size

      64.0MB

    • MD5

      e28b7ed7f5843a7bde8a9372263d8351

    • SHA1

      83c402b1740a5379b8378eb38f4c631325e89223

    • SHA256

      58bd1e64a9dbe1b67dd686c7303408c3ba5e61423d40d9e58d315428e7b017e1

    • SHA512

      5afdfd9bb2cb6345240a49f95ee95584cc224c338f8d34232ae96e357a29cb2d2b6448d748e5358aa4a332902a813200b1bb8f840ac4af86ee44e87dd481f7eb

    • SSDEEP

      1572864:VjddrbWEKIXkqEPeDFpdS5FTYmNRbQ3bcYNutHxY2eI32Hkf:NfW9iKPkFrUF7Kype6f

    Score
    10/10
    lummastealerspyware

    • Lumma Stealer

      An infostealer written in C++ first seen in August 2022.

      stealerlumma

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks